LTI 1.3

Embed SetFlow inside Canvas, Schoology, Moodle, Brightspace, and any other LMS that speaks LTI 1.3 with the standard advantage services.

What LTI 1.3 gets you

With LTI configured, your teachers and students don't need a separate sign-in for SetFlow. They click a link in the LMS course and land directly in the equivalent SetFlow surface — already authenticated, already enrolled in the right course, with grades flowing back to the LMS gradebook.

Tool endpoints

These are the public LTI 1.3 endpoints to use when registering SetFlow as a tool in your LMS:

Tool URL          https://getsetflow.app/lti/launch
OIDC initiation   https://getsetflow.app/lti/login
Public JWKS       https://getsetflow.app/lti/jwks
Deep linking      https://getsetflow.app/lti/deep-link

Note

These endpoints implement the IMS Global LTI 1.3 Core specification, plus the Names & Role Provisioning Service and the Assignment & Grade Service.

Installing the tool

The exact path depends on your LMS, but the shape is the same in all of them:

Register a developer key (or external tool, depending on the LMS) using the URLs above.
Configure scopes: at minimum the LTI Core launch scope, plus NRPS and AGS for roster and grade flows.
Deploy the tool to the courses or accounts where teachers should see it.

Tip

Need help with the registration? Email [email protected] with your LMS name and we'll send you a copy-pasteable configuration template.

Step 4 — Verify your domain (recommended)

Domain verification proves to SetFlow that your Canvas / Blackboard / Brightspace / Moodle / Schoology instance actually belongs to your institution. Without it, anyone with your LTI credentials could theoretically register as your institution. It is the same trust model SSL DV certificates use: if you can write the zone file, you own the domain.

To verify your domain:

Go to Settings → LTI → Domain Verification in your SetFlow school admin panel.
Copy the TXT record value SetFlow provides — it looks like setflow-lti-verify=<random-token>.
Add it to your DNS as:

Record name:  _setflow-lti-verify.yourdomain.edu
Type:         TXT
Value:        setflow-lti-verify=<the token SetFlow gave you>
TTL:          3600 (or your provider's default)

Click Verify in SetFlow.
Verification usually completes within 15 minutes (DNS propagation).

Once verified, a shield badge appears next to your LMS in the admin panel, and SetFlow accepts launches from your platform as fully trusted. Without domain verification, a yellow warning banner appears at the top of every SetFlow page launched from your LMS — visible to all your users — encouraging them to ask their administrator to verify the domain. Verification takes about 15 minutes and removes the banner permanently. Hard enforcement (blocking unverified launches outright) is on the roadmap once production telemetry confirms no pilot installations still depend on unverified launches.

Note

See Security architecture — LTI 1.3 security for the full trust model and what the verification actually guards against.

Placements

Course navigation — a SetFlow tab in every course's left rail.
Assignment placement — link a SetFlow assignment as the LMS gradebook item.
Editor button — embed a SetFlow link inline from the rich-text editor.

Names & Role Provisioning (NRPS)

With NRPS enabled, SetFlow keeps the course roster in sync with the LMS automatically — students added in the LMS appear in SetFlow, students removed disappear. No manual roster management required.

Assignment & Grade Service (AGS)

With AGS enabled, grades released in SetFlow's SpeedGrader flow back to the LMS gradebook. The LMS becomes the system of record for grades; SetFlow is the place teachers actually do the grading.

Note

Both NRPS and AGS use the standard memberships.readonly and lineitem / score scopes. We never use them to read student work content from the LMS.